Initiate Connection: Select if the remote endpoint has a static IP address so that a connection to the remote gateway can be initiated by the gateway.

Respond Only: Select if the IP address of the remote endpoint is unknown or cannot be resolved through DynDNS. The gateway is not able to initiate a connection to the remote gateway but waits for incoming connections to which it only needs to respond.

Gateway (if selected initial connection): you must create gateway of site branch office.

Authentication type: can select such as

Preshared key: Authentication with Preshared Keys (PSK)

RSA key: Authentication using RSA keys

Local X.509 certificate

Remote X.509 certificate

VPN ID type: Depending on the authentication type you must select VPN ID type and VPN Identifier. you can select among the following VPN ID types:

IP address

Hostname

Email address

Distinguished name: only when you selected local X.509 Certificate authentication.